Privacy Policy

1. Summary (the short version)

• We do not operate a server that collects your trips. Route, speed, and timestamp data for drives are stored encrypted on your device. Optional dashcam video stays on your device unless you export or offload it.
• We do not sell your data. We do not use it for advertising.
• Some features send limited data to third parties you choose to use (e.g., map tiles, optional crash diagnostics, optional cloud backup you configure).
• While driving, some features send your location to fanal.io to look up posted speed limits and nearby enforcement map context. Your location is used only to answer the request and is not stored. Our server logs record that a lookup happened, not where you were, and are not linked to your identity.
• You control retention and can erase all data in the app at any time.

2. Information Processed on Your Device (not sent to us)

Drive recording stores the following on-device:

• Location & route: precise GPS coordinates (lat/lon), including in the background while recording, used to record drives and show map context. Heading and altitude may be stored when available.
• Speed & motion: derived from GPS/device sensors.
• Activity metadata: timestamps, distance, GPS quality, integrity hashes, and (if enabled) incident/video records and cryptographic receipts.
• Settings & preferences: units, retention rules, dashcam options, and your acceptance of these terms (version and date). This data is stored in an encrypted on-device database and is not transmitted to Fanal.

Records are hash-chained and stored encrypted on the device. They are not uploaded by Fanal.

3. Why We Use Background Location

Fanal uses location "Always" / in the background to (a) auto-start and auto-stop recording for drives you enable and (b) refresh posted-limit and nearby camera map context while you drive. It is not used to track you for advertising. Location is sent to fanal.io only to answer live speed-limit and enforcement lookups while you drive (see Section 4); it is not retained as a trip or used to profile you. While auto-start waits for your next drive, it uses low-power on-device positioning and sends nothing to fanal.io until you are moving at driving speed. You can disable background location in your device settings, which will limit these features.

4. Information Shared with Third Parties

Only as needed for features you use:

• Map tiles (Mapbox): to render maps, your approximate location may be sent to Mapbox (api.mapbox.com), subject to their privacy policy.
• Map/road data (e.g., OpenStreetMap) and public-agency sources: used during drives to derive limits, camera locations, and corridors; may be fetched or cached. Plate-reader (ALPR) map context comes from fanal.io for the area around you while driving. When fanal.io looks it up from OpenStreetMap, it widens the area to a coarse grid and sends the request from our server, so OpenStreetMap never receives your location or IP address.
• Optional diagnostics/crash reporting (e.g., Sentry): off by default. If you opt in, limited crash/diagnostic data (not your GPS trips) is sent to help us fix bugs.
• Optional bring-your-own-cloud backup: if you enable it, encrypted copies of your trip records are uploaded to the cloud provider you configure, using keys you hold. We do not receive your key or your content.
• Posted-limit & enforcement lookups (fanal.io) — drives only: while driving, the app asks fanal.io for the posted/assumed speed limit and nearby school-zone corridors and camera map context for your location. Corridor discovery uses a coarse location; posted-limit lookups send your precise location and heading, because they must identify the specific road. These requests are used only to answer the lookup and return relevant coverage. The location is not stored or combined into trips; our server logs keep only the time, the address that was requested, and your IP address for security, with no coordinates.

We do not sell personal information and do not share it for cross-context behavioral advertising.

5. Data We Collect Directly

Because of our local-first design, we collect little or nothing on our own servers. If you contact support or join the beta, we may process your email, correspondence, and which kind of phone you use (iPhone or Android) so we send the right beta invite, and, if you tell us after signing up, what you'd mostly use Fanal for. Messages and screenshots sent through the support form are delivered to our inbox by email so we can reply; screenshots are resized and stripped of location data in your browser first, and the form itself stores nothing on our servers. App stores may provide us aggregate, anonymized usage or crash statistics per their platforms.

The app does not check in with us or report how it is used. We see install and version counts only through the aggregate reports Apple provides for TestFlight and the App Store.

6. Retention and Deletion

• You choose how long activities are kept (e.g., 7 / 30 / 90 days or forever); older records are removed automatically per your setting.
• Saved moments and their video clips follow a separate window you choose (90 days, 180 days by default, 1 year, or until you delete them) and are removed automatically once it passes.
• You can delete individual drives, or erase all data on-device at any time.
• On Android, Fanal turns off the operating system's automatic cloud backup and device-to-device transfer for its data, so your trips leave the phone only if you turn on Fanal's encrypted Cloud backup.
• Data you offload to your own cloud is retained per your provider's settings and your control.

7. Security

We use on-device encryption and integrity hashing designed to make activity records tamper-evident. However, no method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. Protecting your device passcode and any cloud credentials you connect is your responsibility.

8. Your Rights

Depending on where you live (including the EU/UK under GDPR and California under CCPA/CPRA), you may have rights to access, correct, delete, or port personal data, and to object to or restrict certain processing. Because most data is on your device, you can exercise access/deletion directly in the app. For requests involving data we hold (e.g., support emails), contact hello@fanal.io. We will not discriminate against you for exercising these rights.

Where GDPR applies, optional diagnostics are based on your consent; background location and on-device recording features you enable are based on your consent and/or performance of the Service you request. We are the data controller for any limited data we hold (such as support correspondence). Optional third-party services you enable may transfer data internationally under their own safeguards.

9. Children

The Service is not directed to children under 16 and we do not knowingly process their data. If you believe a child provided data, contact us to delete it.

10. International Users

The Service may be used outside the United States (e.g., the EU). Where we process data, we aim to honor applicable local law. Optional third-party services you enable may transfer data internationally under their own safeguards.

11. Changes to This Policy

We may update this Policy. We will revise the "Last updated" date and, for material changes, provide in-app notice where appropriate. The app stores the accepted policy version on your device.

12. Contact

Data controller: DaFonte Labs LLC, 402 Pequot Avenue. Questions: hello@fanal.io.